sciforafrica.org

Issued by R3

About this certificate

This digital certificate with serial number 04:18:67:fa:1f:9f:7e:3b:86:6d:75:1b:62:4d:5e:c9:f3:e8 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sciforafrica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:18:67:fa:1f:9f:7e:3b:86:6d:75:1b:62:4d:5e:c9:f3:e8
Serial Number (int): 356754129732315032377079715156281224983528
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cd:8a:70:d6:4f:85:7e:a0:44:73:98:58:6a:40:18:91:91:86:16:97
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 41:97:c7:c0:3a:c7:cc:f8:e9:7c:d2:3c:94:dc:7d:45:38:ca:a1:49
Fingerprint (sha256): b3:96:d0:b5:be:07:23:d3:4a:fb:ab:03:f6:c2:40:5f:06:73:51:e3:1f:f0:36:33:9e:85:1d:22:2d:ca:97:50

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sciforafrica.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sciforafrica.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquencha.com
braveboyandfearlessgirl.com
exodusinstitute.org
poisonivyextermination.com
roa-news.com
sciforafrica.org
tabletagratis.com
therecyclingplace.net

Other certificates including the domain name sciforafrica.org

(limited to 100 certificates)
sciforafrica.org
watemplates.statenationals.us.sciforafrica.org
leeds.life
sciforafrica.org
sciforafrica.org
sciforafrica.org
scriptureuntangled.ca
sciforafrica.org

Certificate

The complete raw certificate details for sciforafrica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Alv3ek3AxQFdqEX6IhW
9Xi1AKYbG6tqK2jHp9VwIYU7uhg/unqzbPQd28zxvWHXw6jIAgc/b6rTZEfEtQhW
Cyz73pM99Ipy9UNERFDK6Wm2wDJu3nZhm623yrt6GXLkEFUz4KJ2GY4aKrpim9Jr
UkryPFMlk4DEE9IBpEsk9OeHCmrX25GpacBJ7mYnKHDqX1R4e78Jo/TYUUx3zuyR
fWWn82nKjlG6d78qcPbF92qPAk2DbkmYJCUDsRgy7WQznHm3UrCqqvltSqVxMnME
RKsyGRjEUP433UebZXumOsegzgGcR+X+PxOXRbmTwnbMMXff+L4BZiCAPrT9xecl
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356754129732315032377079715156281224983528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 21:02:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 21:02:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sciforafrica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26767174201005164109744112972384351311817899986355490926930870282391072199219824775182362426184352220128377435917800184854384872816933175392061579187510742492298242942104551398499567160093598132461307700981580026493653476185208077798330336033853433377703006372461011384409409831026808143915009599678994241042175717063261577857739825168549804618003951334958534806131478775022556455243586389298385605099315700907745554117820456613993077678238774142993204424355963800166005824832339959704483137220155576651722890222274735049220683748085196643017760542554170877244844898302931842066710915564059859505985589682185708184889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd8a70d64f857ea0447398586a40189191861697
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquencha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braveboyandfearlessgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exodusinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyextermination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roa-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciforafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletagratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therecyclingplace.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d144c515e0000040300483046022100eaa50e3a47b01b1aff1d538c89a5d71f8e1fe89dbc38707fcbb584aab0a0bfc4022100860d1337b59f40562c983d7a80c87b6cc131b53dc0ed6155bbbc9ca26bcd62990077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d144c516a0000040300483046022100c74815ccec8e1a141b530a48b00a96626f16b58a264e83e643fe189f951543e3022100eb5cac1cc3770ca92c5711f69de2830198455aaa9ad5b028bb19ffeb76b34b51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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